This is a long-shot, but take a look here:

    https://github.com/simonw/datasette.io

I've been blogging for decade(s) with:

    http://blosxom.com/documentation/users/blog.html
    http://blosxom.com/documentation/users/install/dynamic/isp.html

...it's basically a janky (possibly insecure?) perl-cgi-script which converts a directory of markdown files into a blog.

I love the idea of it in that it's just markdown files! `vim ~/blog/entries/some-random-thought.txt` end ups with $AUTHOR of `chown`, $DATE of the file modification time, tree of `mkdir -p ~/blog/entries/some/category` ... it's just trivial to backup, restore, and work with. You can even (probably) hook it up to a static regen which is probably safer: http://blosxom.com/documentation/users/install/static/

The link to datasette is if you're wanting to nerd around a bit more, as it's kindof a combo of sqlite and a web server for rendering data from within it. The linked github repo is how their main site is built/rendered and it definitely has aspects of "blogginess", and you can kindof see how it's done. The neat thing of `let tags = "SELECT DISTINCT tags FROM posts"` or transforming blogging into effectively updating/adding records in a database is an extension of the blosxom zen of "it's just files [records], yo! go forth and edit them..."

wordpress.org is the defacto standard right?

set plugins and themes to auto-update, add wordfence and change default settings.

use updraft or similar to pull full backups on a schedule.